Privacy Policy & POPIA Notice
This notice explains how Your Next Website handles personal information submitted through our website and during the delivery of our services.
Last updated: 19 September 2026
About This Privacy Notice
This Privacy Policy explains how Your Next Website collects, uses, stores and protects personal information when you visit our website, submit an enquiry, request a quotation, purchase a service, communicate with us, or otherwise interact with our business.
We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African law.
Personal Information We May Collect
Depending on how you interact with us, we may collect information such as:
• Name and surname
• Email address
• Phone or WhatsApp number
• Business name and website address
• Project type, requirements and budget information
• Messages, enquiries and correspondence
• Quotation, invoice and payment-related information
• Technical information reasonably required to operate and secure the website, such as browser, device, log or cookie information where applicable
We do not intentionally request unnecessary special personal information through our standard website enquiry forms.
How We Collect Information
We may collect personal information when you:
• Complete a website enquiry or quotation form
• Contact us by email or other communication channel
• Book a consultation or planning service
• Accept a quotation or become a client
• Supply project content, credentials or business information
• Browse our website where cookies, analytics or server logs are in use
Why We Process Personal Information
We use personal information only for legitimate and defined business purposes, including:
• Responding to enquiries and quotation requests
• Assessing website project requirements
• Preparing proposals, scopes and quotations
• Delivering contracted services
• Communicating about projects, invoices and support
• Maintaining business and accounting records
• Improving and securing our website and services
• Complying with legal and regulatory obligations
Lawful Processing
Where required by POPIA, personal information will be processed on an appropriate lawful basis. Depending on the circumstances, this may include your consent, steps required to enter into or perform a contract, compliance with a legal obligation, or the legitimate interests of you, Your Next Website, or a third party where permitted by law.
We aim to collect only information that is adequate, relevant and reasonably necessary for the purpose for which it is processed.
Website Forms and Google Sheets
Information submitted through our website forms may be stored in our business systems and cloud-based services used to manage enquiries, quotations and client projects.
We use this information only for managing your enquiry, preparing quotations, providing services and maintaining appropriate business records.
Service Providers and Third Parties
We may use trusted third-party service providers where reasonably necessary to operate the business or deliver services. These may include website hosting and domain providers, WordPress and software providers, email service providers, Google services, payment processors, analytics, security, backup or monitoring services, and professional advisers where reasonably required.
Third parties may process information only to the extent necessary for the relevant service, subject to their own legal and contractual obligations.
Cross-Border Processing
Some technology and cloud-service providers may process or store information outside South Africa.
Where personal information is transferred outside the Republic, we will take reasonable steps to ensure that the transfer is handled in a manner consistent with applicable POPIA requirements, including the requirements relating to transborder information flows.
Cookies and Analytics
Our website may use essential cookies required for normal website operation. We may also use analytics or similar technologies to understand website usage and improve performance.
Where non-essential cookies or tracking technologies require consent, they should be managed through the applicable cookie or consent mechanism.
You may also control certain cookies through your browser settings.
Direct Marketing
We will not use your contact details for unsolicited electronic marketing in a manner that is inconsistent with applicable law.
Where marketing communications are sent with your consent or where otherwise permitted by law, you may request that they stop at any time.
Transactional or service-related messages concerning an active enquiry, quotation, invoice or project are not treated as marketing communications.
Retention of Personal Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, for legitimate business record-keeping, to resolve disputes, or to comply with legal, tax, accounting or contractual obligations.
When personal information is no longer reasonably required, we will take appropriate steps to delete, destroy, de-identify or securely archive it where applicable.
Security Safeguards
We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, interference, alteration, disclosure or destruction.
Measures may include access controls, account security, reputable service providers, software updates, backups and restricted access to business systems.
No internet or electronic storage system can be guaranteed to be completely secure, but we take reasonable steps appropriate to the nature of the information we process.
Your Rights Under POPIA
Subject to POPIA and applicable procedures, you may have the right to:
• Ask whether we hold personal information about you
• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Request deletion or destruction where legally appropriate
• Object to certain processing
• Withdraw consent where processing is based on consent
• Object to direct marketing
• Lodge a complaint with the Information Regulator
We may need to verify your identity before acting on a request.
Children and Special Personal Information
Our services are primarily directed at businesses and adults. We do not intentionally collect personal information from children through our standard enquiry process.
Please do not submit special personal information unless it is genuinely necessary for a service and has been specifically requested or agreed.
Automated Decision-Making
We do not use website enquiry information to make decisions that produce legal or similarly significant effects solely by automated means.
Information Security Incidents
If we become aware of a security compromise involving personal information, we will assess the incident and take the steps required by applicable law, which may include notifying affected persons and/or the Information Regulator where required.
Privacy Requests
To request access, correction, deletion, objection or other assistance relating to your personal information, contact:
Your Next Website
Email: hello@yournextwebsite.co.za
Website: https://yournextwebsite.co.za
Please provide enough information for us to identify the relevant records and understand your request.
Complaints to the Information Regulator
If you believe your personal information has been processed contrary to POPIA, you may also lodge a complaint with the Information Regulator (South Africa).
Current regulator contact and complaint information is available from the Information Regulator’s official website and eServices platform.
Changes to This Policy
We may update this Privacy Policy when our services, technology, legal obligations or information-handling practices change.
The latest version will be published on this website with an updated revision date.
Hosting, Domains and Subscription Payments
If you purchase a hosting subscription or related hosting service from Your Next Website, we may process additional personal and business information necessary to set up, administer and support that service.
This may include your name, email address, contact details, business information, selected hosting plan, subscription status, payment reference, domain name details, and technical or account information reasonably required to provide the service.
Recurring hosting payments may be processed through third-party payment providers such as Paystack. We do not receive or store your full payment card details. Payment providers process payment information according to their own privacy and security requirements.
Where a hosting plan includes domain registration, we may share the information reasonably required to register, renew, transfer or manage the domain with the applicable domain registrar or registry. Some domain-registration information may be processed in accordance with registry requirements and applicable law.
Hosting services may be delivered using third-party hosting infrastructure and service providers. Information may therefore be processed by those providers where reasonably necessary to create and manage your hosting account, provide email or website services, maintain backups, provide support, prevent abuse, secure systems, or comply with legal obligations.
We use hosting and subscription information for purposes including activating and managing your service, processing recurring payments, communicating about renewals or failed payments, providing technical support, administering domains, maintaining appropriate business records, and complying with contractual or legal obligations.
Hosting and subscription records may be retained for as long as reasonably necessary to provide the service, manage the business relationship, resolve disputes, maintain accounting records, or comply with applicable legal obligations.
Questions About Your Information?
Email hello@yournextwebsite.co.za for privacy or POPIA-related requests.